User challenge questions and challenge-response system needs to be modified
01. Answer to each challenge question must have at least three (3) characters. Application which implements challenge and response mechanism must enforce the minimum length of the response as 3 characters. STRIDE Threat Type(s) : Spoofing, Technic...
Information systems are not to allow users to compose challenge questions.
Challenge questions must be chosen from an EY-approved list. Information systems are not to allow users to compose challenge questions. During a challenge interaction, the challenge questions are to be selected at random by the information system ...
The user’s current password must be validated while changing challenge questions and response phrases.
The user’s current password must be validated while changing challenge questions and response phrases. Authentication is required for changing a user's challenge and response phrases.
Adding scheduler functionality in PEM just like we have in SI.
Hi Team, I am writing in regarding to a missing functionality in IBM PEM which is Scheduler. Currently, in PEM whatever we want to do can only be done via an Activity and to make it happen we need to manually execute an activity everytime we want ...
Partner Registration Approval should trigger an action
The Partner Registration Approval should trigger an action to perform user customized actions like Rest API to push the partner details to customer LDAP or customer custom tables for auditing or other purposes. As SSO implementation is getting int...
Need Access to PEM PR to delete the files in Library
We need to remove some of the files in the Library from PEM Partner Repository. We only have access to Upload and Refresh. However we don't have option to delete.
Currently in PEM while creating the users. PEM is allowing only email address as user id. As this is in IBM cloud and SaaS solution. Can you change the user id to accept any unique string ?